switch to hiera, roles/profiles paradigm